Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier: gbmhj7xq/8W4g711FlTuJgCgCn++uMnn/QyHXgvxS64=
Subject key identifier: 0F:BB:BB:98:82:10:04:68:4E:16:6C:56:BF:64:A4:F4:11:71:60:85
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 019A4F2B88652E3D662EDF93DCE6C7FC8D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number: 0B5C
Signing time: Tue 04 Nov 2025 14:00:44 +0000
Manifest this update: Tue 04 Nov 2025 14:00:44 +0000
Manifest next update: Wed 05 Nov 2025 14:00:44 +0000
Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: C6rJcNI2BK+A1vvN17BaN2kGM69X6cf2vtvrysF2alQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:88:65:2e:3d:66:2e:df:93:dc:e6:c7:fc:8d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Nov 4 14:00:44 2025 GMT
Not After : Nov 5 14:00:44 2025 GMT
Subject: CN=0fbbbb98821004684e166c56bf64a4f411716085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:de:84:d6:c5:0a:f8:e7:74:c2:34:e4:33:
bf:2d:ee:35:e9:34:f4:35:20:0f:27:54:ff:73:d8:
d7:e4:12:d0:cb:de:78:ad:33:5b:b2:8d:02:62:75:
e9:1f:e7:8b:09:b2:0c:4d:bd:b4:8e:63:e1:18:89:
ec:45:9c:5e:ee:b3:29:e7:e0:31:50:43:75:04:d0:
f8:95:59:f5:93:e1:6b:ba:b8:62:75:2a:46:5e:9c:
4f:51:9a:d5:19:5d:ee:96:24:65:ac:ae:e0:8d:88:
c0:36:de:99:c5:75:d2:ee:50:ad:74:f6:d0:3d:ef:
e7:a0:bb:1f:d9:fa:b4:87:82:24:0a:97:4e:c1:3f:
de:78:c0:d9:2b:df:7d:81:8b:89:63:7f:a8:8b:12:
2c:37:8f:c1:5e:24:33:1f:33:61:a0:81:cd:51:98:
f7:63:45:fd:87:6b:08:42:cf:0b:b8:5b:73:58:3b:
89:f5:80:99:9f:29:4b:6e:a6:c8:66:03:79:fa:3b:
dd:53:a2:79:b8:0d:3d:14:7f:98:1a:1c:ac:f7:0b:
78:47:a0:10:58:67:58:59:f5:24:91:34:6a:73:e7:
27:17:ef:4c:d9:35:31:70:44:fe:ec:e6:a1:8a:97:
0e:b8:0b:0a:c7:3d:54:8a:2a:57:b7:2b:4f:f6:0f:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:BB:98:82:10:04:68:4E:16:6C:56:BF:64:A4:F4:11:71:60:85
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:22:47:c0:52:43:aa:53:23:c6:5e:5a:f2:52:62:96:35:74:
0a:f1:74:c7:63:f3:30:0c:94:10:be:21:5e:fb:e0:d9:d4:b2:
47:21:97:bf:87:59:f3:2a:62:04:08:9a:c3:32:ad:fd:41:1c:
7e:3d:87:c4:d1:ba:67:7e:34:a3:77:29:65:34:0c:8a:23:11:
3b:e8:93:76:9a:3f:93:ec:85:63:a1:7a:02:c7:b9:7a:e6:6c:
bc:a7:b7:a7:00:da:ad:9b:ba:62:8d:0d:e7:02:84:34:4d:11:
cc:0d:36:ea:92:ea:d2:7a:f4:2c:0e:03:01:5b:be:24:fe:64:
55:e5:07:18:4d:4e:94:a4:0d:8a:3b:d3:dd:96:65:e5:52:65:
8a:6d:ea:62:56:06:e7:d3:37:76:5b:3e:4e:ae:ea:a1:27:f3:
fb:23:d7:55:67:41:d9:e1:ef:f3:5d:bf:f2:a2:26:96:6e:b6:
c0:8c:4c:b0:d4:4d:34:a8:dc:81:b3:b8:8a:95:63:b5:fd:2b:
af:43:b3:13:64:3b:9e:6f:08:66:32:b7:09:b7:60:c1:b7:40:
ba:9a:18:77:c4:d5:5c:6b:83:81:a2:4d:d0:51:a1:d2:35:ec:
e6:93:ad:ba:a3:0d:7b:9e:33:3c:df:5f:73:51:4b:0b:a7:cd:
ff:76:fb:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK4hlLj1mLt+T3ObH/I2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNThlYjdjNjE3NTBjY2UzMzNjZDAwMjZjNzdjOTNjYmU0
NjVkOTgwHhcNMjUxMTA0MTQwMDQ0WhcNMjUxMTA1MTQwMDQ0WjAzMTEwLwYDVQQD
EygwZmJiYmI5ODgyMTAwNDY4NGUxNjZjNTZiZjY0YTRmNDExNzE2MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRLehNbFCvjndMI05DO/Le416TT0
NSAPJ1T/c9jX5BLQy954rTNbso0CYnXpH+eLCbIMTb20jmPhGInsRZxe7rMp5+Ax
UEN1BND4lVn1k+FrurhidSpGXpxPUZrVGV3uliRlrK7gjYjANt6ZxXXS7lCtdPbQ
Pe/noLsf2fq0h4IkCpdOwT/eeMDZK999gYuJY3+oixIsN4/BXiQzHzNhoIHNUZj3
Y0X9h2sIQs8LuFtzWDuJ9YCZnylLbqbIZgN5+jvdU6J5uA09FH+YGhys9wt4R6AQ
WGdYWfUkkTRqc+cnF+9M2TUxcET+7OahipcOuAsKxz1UiipXtytP9g8pQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+7u5iCEARoThZsVr9kpPQRcWCFMB8GA1UdIwQY
MBaAFKxY63xhdQzOMzzQAmx3yTy+Rl2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgt
MWRlMDBiZDg5MTJjLzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgtMWRlMDBiZDg5MTJj
LzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiJHwFJD
qlMjxl5a8lJiljV0CvF0x2PzMAyUEL4hXvvg2dSyRyGXv4dZ8ypiBAiawzKt/UEc
fj2HxNG6Z340o3cpZTQMiiMRO+iTdpo/k+yFY6F6Ase5euZsvKe3pwDarZu6Yo0N
5wKENE0RzA026pLq0nr0LA4DAVu+JP5kVeUHGE1OlKQNijvT3ZZl5VJlim3qYlYG
59M3dls+Tq7qoSfz+yPXVWdB2eHv812/8qImlm62wIxMsNRNNKjcgbO4ipVjtf0r
r0OzE2Q7nm8IZjK3CbdgwbdAupoYd8TVXGuDgaJN0FGh0jXs5pOtuqMNe54zPN9f
c1FLC6fN/3b7Rg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:30:02 2025 by rpki-client